Privacy Policy

The short version

Your full footage never leaves your machine.Endroll indexes and renders video locally. What reaches our servers when you use the AI features: prompts, transcripts, text digests of your footage, small preview stills the AI looks at to judge shots, and the usage records needed to bill credits. We don’t sell data, and we don’t run advertising trackers.

1. Who is responsible

The data controller is RagingRam Oy, Business ID 2944344-6, Jermunkuja 13, 08700 Lohja, Finland. Contact: support@endroll.ai · +358 40 190 9204.

2. What we process

• Account data — your email address, name (if you give one), and paired-device records. Legal basis: performing our contract with you.
• Billing data — purchases are processed by Dodo Payments as Merchant of Record. We receive transaction records (what was bought, when, for which account) but never your card details. Legal basis: contract and legal obligations.
• Credit usage — which AI operations you ran, when, and how many credits they consumed. This is how billing works. Legal basis: contract.
• AI request content — what is sent to power AI features: your prompts, scripts, transcripts and text digests of footage, and small preview stills (single frames and short thumbnail strips) the AI looks at to judge shots. Your full footage is not uploaded. Legal basis: contract.
• Generation prompts — if you use generated supporting assets (an image, a short clip, a synthetic voice-over or a sound effect), the text prompt is sent to the provider that produces it. Where you explicitly pick one of your own frames as a style reference for a generated image, that single downscaled frame is sent with it — never your full footage, and never without you choosing the frame. Legal basis: contract.
• Anonymous usage and editing measurements (always on) — the app sends anonymous events about which features ran and how the AI’s editing suggestions performed: counts, timings, and numeric measurements of editing decisions (for example that a suggested take was replaced, by how many frames a cut was retimed, or that a draft was rendered rather than abandoned). These measurements are what teach Endroll to cut better. Events carry a rotating anonymous ID, not your account, and by design cannot contain footage, images, audio, scripts, transcripts, file names or file paths — the format has no field for them, only numbers and short fixed labels. This collection is part of how the product is provided and cannot be switched off; you are told this before you create an account. Legal basis: legitimate interest in improving the service, balanced by the fact that the data is anonymous and cannot identify you or your work. If you do not want to send these anonymous measurements, do not use Endroll.
• Beta applications — what you submit in the beta form (email, links, description of your work). Legal basis: consent, which you can withdraw at any time by emailing us.
• Enterprise enquiries — what you submit in the enterprise contact form (name, work email, company, team size and your description of what you need). We use it to answer you and to keep track of the conversation. Legal basis: steps taken at your request before entering into a contract.
• Support email — correspondence you send us. Legal basis: legitimate interest in answering you.

3. What we do not process

• Your video and audio files — they stay on your machine. What the AI sees of the picture is limited to the preview stills described above, plus a single frame you pick yourself as a style reference for a generated image.
• Advertising or cross-site tracking data — there is none.
• Card numbers — payments are handled entirely by our Merchant of Record.
• Voice samples — Endroll offers no voice cloning. Text-to-speech uses stock voices and you cannot upload a voice recording.

4. Service providers

We use a small set of processors to run the service:

• Dodo Payments — payments and tax handling (Merchant of Record).
• Vercel — website hosting.
• Anthropic — AI processing of the text requests described above. Under our commercial agreement, this data is not used to train their models.
• fal.ai — generation of illustrative images and short clips from your text prompt (and, where you choose one, your single style-reference frame).
• ElevenLabs — generation of synthetic voice-over and sound effects from your text prompt.
• Resend — transactional email (e.g. beta applications, account email).
• Cloudflare Turnstile — bot protection on forms.

Some providers process data in the United States. Where they do, the transfer is covered by the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses.

5. Retention

Account and billing records are kept for as long as your account exists, and thereafter as long as accounting law requires. AI request content is retained only as long as needed to operate and debug the service. Anonymous usage counts and anonymous editing-decision measurements are retained for as long as they are useful for improving Endroll — they contain no personal data and cannot be traced back to you, so there is no time limit that would protect anyone. Beta applications are deleted when the beta program ends if you don’t become a customer.

6. Your rights

Under the GDPR you can ask us for access to, correction of, or deletion of your personal data, ask us to restrict or object to processing, and take your data with you. Email support@endroll.ai and we’ll handle it. You also have the right to lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi).

7. Cookies

This site uses only what is strictly necessary to function (including Cloudflare Turnstile’s bot check on forms). No analytics or advertising cookies are set.

8. Changes

If this policy changes materially — for example, when new features such as optional cloud storage integrations launch — we will update this page and notify account holders by email.